REMARKS 

Reconsideration of the above-identified application in view of the amendments 
above and the remarks following is respectfully requested. 
Claims 9, 11, 13, 14, and 21 -26 are in this case. 

Claims 9, 11,13, 14, and 21 - 26 have been rejected under 35 USC §112 and 
35 USC §102. 

Claim 9 has been amended to take into consideration the Examiner's objection 
regarding grammar, by deleting the word "of in the phrase "a module for 
decomposing [[of]] the 'email message into components" as the Examiner has 
suggested. 

Comments regarding the SI 12 rejection. 

As noted above, the Examiner has rejected claims 9, 11, 13, 14, and 21 - 26 
under 35 USC §1 12 for lack of support in the specification. 

Independent claims 9 and 21 have been amended to take into consideration the 
Examiner's analysis regarding the §112 rejection, in which the Examiner found no 
support in the specification for the limitation recited as wherein at least one of said 
rules relates to an aspect of said components other than the content of said 
components". 

The Applicants have amended the above limitation in independent claims 9 
and 21 to recite: " . .wherein at least one of said rules relates to c m as p ect the format of 
said components e&e? rather than the content of said components". 

Support for the above amendment was presented in the Applicants' response 
to the previous Office Action, inter alia including: 
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[0045 of the present application] "As mentioned above, a well-known 
vulnerability of email-related systems is the length of some of the 
formats, which, for example, at Base64 should be a multiple of 4, he. 
4, 8, 12, 16, 32, 64 bytes, and so forth:' 

[0027 of the present application] "...correcting the structural form (e.g. 
structure, format, and content). , 

The Applicants respectfully request the Examiner to enter the above-presented 
amendments to claim 9 and claim 21. In the response (filed September 6, 2006) to the 
previous Office Action (mailed June 7, 2006), the Applicants' expressed intent for the 
amendment to these claims (which the Examiner has rejected on the basis of 35 USC 
§112 in the present Office Action) was to limit the claims to having a rule that was 
based on a factor other than content. As seen in the excerpt from paragraph [0027] of 
the present application (above), the specification clearly distinguishes between 
"content" and other aspects, such as "format". Although support for the previous 
amendment ("...wherein at least one of said rules relates to an aspect of said 
components other than the content of said components") is thus implied by the 
specification, the precise language recited in the amendment does not appear in the 
specification, and it i$ this absence which the Examiner has noted in the present 
Office Action as grounds for rejection under 35 USC §112. Therefore, to clarify the 
intended previous amendment with recited language that appears explicitly in the 
present specification, the Applicants have amended independent claims 9 and 21 to 
recite the limitation "...wherein at least one of said rules relates to an aspect the 
format of said components other rather than the content of said components". 

Once again, the Applicants respectfully request that the Examiner enter these 
amendments, as the amendments do not alter the scope of the claims from the 
previous amendments, but rather merely clarify the claims to precisely recite the 
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previously-intended limitation In terms of language that has explicit support in the 
specification, as detailed above. To reinforce this request for entering the present 
amendments, the Applicants respectfully note that the same support offered for the 
present amendments (paragraphs [0045] and [0027] of the application) was offered in 
the response to the previous Office Action for the amendments made at that time. 

Comments regarding the §102 rejection. 

Also as noted, the Examiner has rejected claims 9, 11, 13, 14, and 21-26 
under 35 USC §102, as having been anticipated by Kim et al, US Patent 6,701,440 
(herein denoted as "Kim"), which discloses a system and method for remotely 
detecting the presence of viruses in electronic mail. 

As illustrated below, however, the present invention is both novel and non- 
obvious over Kim in that according to embodiments of the present invention, the 
detecting and correcting of malicious email involves analysis and correcting of format 
of the email over and above analyzing the content of the email In contrast, Kim 
relates only to the content of the email (e,g., an attachment) and fails to address issues 
of format. Kim, it is noted, fails to even mention the aspect of format or formatting. 
As in the Applicants' response to the previous Office Action, the current amendments 
to independent claims 9 and 21 of the present invention therefore feature rules other 
than those directed to the content of email components, in particular, the format, and 
therefore serve to distinguish the present invention from Kim. 

This can be seen from the exemplary excerpts from Kim which were cited in 
the present Office Action: 

[Kim, column 5, lines 57-65] "When used by a corporate user, the e- 
mail virus-detection system 100 acts as a gateway located outside of a 
corporate firewall. From the corporate point of view, e-mail messages 
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are processed entirely over the Internet by a third party and the third 
party e-mail virus-detection system 100 prevents an infected e-mail 
message from entering the corporate environment or domain, either by 
first cleaning the infected e-mail message or by not forwarding the 
infected e-mail message to the destination server or system," 

[Kim, column 8 line 56 - column 9 line 53] "Quarantine Server 110 

"The quarantine server 110 receives all e-mail messages 112 
determined to be infected by the POP server 104. One purpose of the 
quarantine server 110 is to separate infected e-mail messages from 
uninfected e-mail messages so as to not slow down the POP server 
104. The quarantine server 110 also includes an interface to allow 
cleaning, deleting, and/or sending of notification e-mail messages to 
the user. For example, the quarantine server 110 optionally executes a 
script to notify the user preferably via an email message sent to the 
user's forwarding e-mail address that an infected e-mail message was 
received by the virus detection e-mail service system 100 on the user's 
behalf and/or that the infected e-mail message is quarantined. 

"The quarantine server 110 performs the cleaning and/or deleting of all 
infected email messages. Preferably, the quarantine server 110 attempts 
to clean all infected e-mail messages. If the quarantine server 110 
cannot clean any portion of the infected e-mail message, the quarantine 
server 110 may, depending upon the particular settings of the 
corresponding user profile, delete the entire or an infected portion of 
the infected e-mail message, such as a particular attachment, for 
example. If the quarantine server 110 deletes any portion of the e-mail 
message, it preferably sends an e-mail message notifying the user that 
an infected e-mail message could not be cleaned, that the entire or an 
infected portion of the e-mail message was deleted, and relevant 
information regarding the infected e-mail message such as the e-mail 
address of the original sender, the subject heading of the e-mail 
message, the size of the e-mail message or the attachment deleted, the 
time the e-mail message was sent, and/or any other information as 
desired. 

"Alternatively, as discussed above, the quarantine server 110 may hold 
and store the infected e-mail message for the user and to notify the user 
that an infected e-mail message is being held for the user and/or to 
forward the uninfected portion of the e-mail message. The infected e- 
mail message may be held for an indefinite or a predefined period of 
time. A limit may be placed on the cumulative size of all infected e- 
mail messages stored at the quarantine server for each user such that 
once the limit is reached, all subsequently received infected e-mail 
messages that cannot be cleaned are automatically deleted. 
Alternatively, once the cumulative size limit of all infected e-mail 
messages stored by the quarantine server is reached, the infected e-mail 
messages that cannot be cleaned are automatically deleted on a first-in 
first-out basis. 
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"Once the user is notified of the infected e-mail message held by the e- 
mail service provider, the user may access his account and choose to 
delete the infected e-mail message, specify an address to which to 
forward the infected e-mail message, allow the infected e-mail message 
to remain in the quarantine server 110, or request another attempt to 
clean the infected e-mail message, for example. In particular, if a 
subsequent attempt to clean an infected e-mail message is successful, 
the quarantine server 110 then forwards the cleaned e-mail message 
118 to the SMTP server 114, 

"As the virus detection and cleaning software is continually updated 
with the discovery of new viruses, the quarantine server may 
automatically re-attempt to clean infected e-mail messages stored by 
the quarantine server each time the anti-virus software is updated such 
that newly cleaned e-mail messages may be forwarded to the 
destination e-mail address and automatically removed from the 
memory of the quarantine server 110." 

As indicated above, Kim fails to disclose analyzing email for any aspect other 
than content (e.g., an attachment). That is, Kim fails to teach or suggest anything 
involving the fomiat of email components. 

Therefore, the Applicants maintain that analyzing and correcting email 
components for format is a novel and non-obvious feature of the present invention. 
This novel and non-obvious feature is included in independent claims 9 and 21. 
Accordingly, the Applicants respectfully submit that the amended claims as presented 
previously and herein serve to clearly distinguish the present invention from Kim. 

Support for the present claim amendments is found in the above citations from 
the present application. 



Summary 

No new material has been entered, and claim amendments have been made 
which distinguish the present invention as being novel and non-obvious over the prior 
art, and which are explicitly-supported by the specification as originally filed. 
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Moreover, the Applicants have put forth that the present amendments do not 
change the scope of the amended claims from the scope thereof as amended in their 
response (filed September 6, 2006) to the previous Office Action (mailed June 7, 
2006), but merely clarify the intended limitation of the claim amendments which were 
made previously. 

The Applicants therefore believe that amended independent claims 9 and 21 
now comply with both 35 USC §1 12 and 35 USC §102; and that all remaining claims, 
which depend from amended independent claims 9 and 21, likewise comply with both 
35 USC §112 and 35 USC §102. 

In conclusion, the Examiner's comments have been given careful and thorough 
consideration in the above amendments to the application. In view of the above 
amendments and remarks it is respectfully submitted that the present claim 
amendments are responsive to the Examiner's Action and that the presently-amended 
claims are in condition for allowance. Accordingly, a notice of allowance is 
respectfully and earnestly solicited. 



Respectfully submitted, 



Marie M, Friedman 
Attorney for Applicant 
Registration No. 33,883 




Date: January 1,2007 
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